The Bug Report November 2021 Edition

The Bug Report — November 2021 Edition By Mark Bereza · November 30, 2021 Your Cybersecurity Comic Relief CVE-2021-20322: Of all the words of mice and men, the saddest are, “it was DNS again.” Why am I here? For all our newcomers, welcome to the Advanced Threat Research team’s monthly bug report ...

CVE-2021-42114

creationtimestamp| type| source ---|---|--- 2021-11-16 19:47:11+00:00| published-proof-of-concept| https://t.me/BlackHutEgy/722 2021-11-17 16:20:39+00:00| published-proof-of-concept| https://t.me/cibsecurity/32470...

CVE-2021-42114

CVE-2021-42114 (Blacksmith) affects modern DRAM (PC‑DDR4, LPDDR4X) where TRR mitigations can be bypassed by non‑uniform memory access patterns. ETH Zurich et al. demonstrated a fuzzer (Blacksmith) that triggered bit flips across 40 DRAM devices from major vendors (Samsung, SK Hynix, Micron), enab...

CVE-2021-42114

Modern DRAM devices PC-DDR4, LPDDR4X are affected by a vulnerability in their internal Target Row Refresh TRR mitigation against Rowhammer attacks. Novel non-uniform Rowhammer access patterns, consisting of aggressors with different frequencies, phases, and amplitudes allow triggering bit flips o...